Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
File:                     rjnJrCEn_qcOoyYOwW0giDxVdfU.mft (raw, json)
Hash identifier:          u42uzcxHwAAN1TMwE/GaM5nDPQExHLrkB+TS/CbuqEk=
Subject key identifier:   6D:70:67:F4:0B:7D:67:F8:B3:FF:68:EB:0F:43:92:39:61:FC:1F:AF
Authority key identifier: AE:39:C9:AC:21:27:FE:A7:0E:A3:26:0E:C1:6D:20:88:3C:55:75:F5
Certificate issuer:       /CN=A915A8C3/serialNumber=AE39C9AC2127FEA70EA3260EC16D20883C5575F5
Certificate serial:       2C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
Manifest number:          24
Signing time:             Wed 25 Mar 2026 08:04:15 +0000
Manifest this update:     Wed 25 Mar 2026 08:04:15 +0000
Manifest next update:     Wed 01 Apr 2026 08:04:15 +0000
Files and hashes:         1: rjnJrCEn_qcOoyYOwW0giDxVdfU.crl (hash: s4aqFGKNEinEEsXeABzevPncyR6ZQkMR4Xz2oVngEK4=)
                          2: AF8E04FCFDD011F0A09CBC256C6F56BC.roa (hash: 73wflQOmp36ch6aTOQGjf1gpEemRE1RYS0amCkdLkng=)
                          3: 846CC09CFDD011F0A25053256C6F56BC.roa (hash: 7ja/uUA5rNPy4R9clAJYgMLZ/ert4qYvj2qbqmL8TeI=)
                          4: 29B85B52FDD011F0BDC391246C6F56BC.roa (hash: sAlz6G2JLzFH/kwpxfqxTZ2W57QZu+Wfp6+JbqONI7s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.crl
                          rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:04:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A8C3, serialNumber=AE39C9AC2127FEA70EA3260EC16D20883C5575F5
        Validity
            Not Before: Mar 25 08:04:15 2026 GMT
            Not After : Apr  1 08:04:15 2026 GMT
        Subject: CN=69c396ff-d93c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f7:3b:57:c5:c0:69:0c:ec:20:e1:27:49:22:
                    30:9f:b6:55:11:9c:db:c9:24:56:c2:ad:92:14:03:
                    63:ef:70:28:93:90:3c:cb:b8:ea:ad:57:66:38:20:
                    c6:02:6c:b3:36:2d:6b:73:29:df:f2:6e:26:ad:fc:
                    db:8b:03:20:c6:ec:1f:2e:81:23:56:f3:20:a2:f5:
                    19:fe:24:a9:89:dc:87:eb:1e:9e:47:ce:03:b9:80:
                    cb:07:86:ef:58:92:72:b8:1c:2d:19:23:fe:f1:69:
                    a4:c5:3d:cf:cb:37:f8:d6:db:48:ab:f3:33:1f:bb:
                    21:92:7c:e3:02:8d:c1:e5:84:9f:93:86:6a:fd:ba:
                    00:d8:57:a6:65:44:64:1f:d8:12:bf:fe:d5:81:d7:
                    48:1a:07:61:be:37:02:81:ad:4b:64:77:b1:76:95:
                    ab:21:b1:74:5c:21:af:6a:57:43:6f:ee:d7:43:b1:
                    b1:eb:51:c0:8c:64:a4:3a:be:89:7f:66:30:00:26:
                    13:c6:92:12:17:d1:ff:a7:69:f9:b5:76:4a:da:a3:
                    5e:01:35:60:3f:b1:ec:97:7d:d2:94:2d:70:49:e0:
                    09:c2:ea:8a:18:ac:6d:6d:05:64:e5:02:20:a3:e5:
                    36:c2:03:66:0e:f5:2e:9e:6a:48:eb:67:3d:a2:3b:
                    0f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:70:67:F4:0B:7D:67:F8:B3:FF:68:EB:0F:43:92:39:61:FC:1F:AF
            X509v3 Authority Key Identifier:
                keyid:AE:39:C9:AC:21:27:FE:A7:0E:A3:26:0E:C1:6D:20:88:3C:55:75:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:5f:10:74:b4:84:f7:af:1e:88:ca:13:a0:28:c4:69:46:ed:
         01:9d:b5:37:24:98:d7:a8:30:f3:b7:b4:d2:0b:26:0c:0a:b2:
         d8:38:f9:e5:d0:28:84:53:e6:71:d8:7b:c2:e7:8d:52:8d:02:
         53:70:98:fd:28:15:5d:f1:81:56:3c:8c:c5:f4:d4:3b:32:d6:
         c9:4e:c7:b7:c2:fc:01:93:5f:36:ed:84:eb:dd:d0:7a:03:c5:
         c4:25:d6:07:35:f6:45:3e:4a:25:22:0e:06:4f:7d:2b:a4:f5:
         5e:84:d5:7d:76:40:23:7e:90:a8:0d:11:34:28:7f:36:5f:43:
         f1:9e:9b:a6:7a:33:30:18:1c:99:4d:f1:7e:0b:0d:0f:5b:b9:
         f8:c4:23:eb:27:04:15:17:ea:50:04:61:fa:99:29:06:b3:e6:
         c8:22:11:3d:49:38:fd:66:8a:b1:9d:8b:6e:57:f9:5a:a3:35:
         eb:c6:f7:de:d2:a1:49:fd:d2:9f:9e:3f:36:0d:93:31:60:d1:
         ee:27:20:40:4a:9c:68:2b:8f:e7:af:a2:ef:d4:d0:52:1a:b7:
         10:b4:1c:74:70:65:80:26:6d:ab:17:dd:e7:f8:f6:5b:ec:90:
         97:3a:e3:db:f6:cd:86:c5:91:54:e9:76:f8:e3:a6:75:6b:2e:
         90:82:bb:50
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
QThDMzExMC8GA1UEBRMoQUUzOUM5QUMyMTI3RkVBNzBFQTMyNjBFQzE2RDIwODgz
QzU1NzVGNTAeFw0yNjAzMjUwODA0MTVaFw0yNjA0MDEwODA0MTVaMBgxFjAUBgNV
BAMTDTY5YzM5NmZmLWQ5M2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDG9ztXxcBpDOwg4SdJIjCftlURnNvJJFbCrZIUA2PvcCiTkDzLuOqtV2Y4IMYC
bLM2LWtzKd/ybiat/NuLAyDG7B8ugSNW8yCi9Rn+JKmJ3IfrHp5HzgO5gMsHhu9Y
knK4HC0ZI/7xaaTFPc/LN/jW20ir8zMfuyGSfOMCjcHlhJ+Thmr9ugDYV6ZlRGQf
2BK//tWB10gaB2G+NwKBrUtkd7F2lashsXRcIa9qV0Nv7tdDsbHrUcCMZKQ6vol/
ZjAAJhPGkhIX0f+nafm1dkrao14BNWA/seyXfdKULXBJ4AnC6ooYrG1tBWTlAiCj
5TbCA2YO9S6eakjrZz2iOw8xAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUbXBn9At9
Z/iz/2jrD0OSOWH8H68wHwYDVR0jBBgwFoAUrjnJrCEn/qcOoyYOwW0giDxVdfUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVBOEMzL0ZGOTQ3Qzg0RkRD
RjExRjA4QUZDNTAwMTZDNkY1NkJDL3JqbkpyQ0VuX3FjT295WU93VzBnaUR4VmRm
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvcmpuSnJDRW5fcWNPb3lZT3dXMGdpRHhWZGZVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVB
OEMzL0ZGOTQ3Qzg0RkRDRjExRjA4QUZDNTAwMTZDNkY1NkJDL3JqbkpyQ0VuX3Fj
T295WU93VzBnaUR4VmRmVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBpXxB0tIT3rx6IyhOgKMRpRu0BnbU3JJjXqDDzt7TSCyYMCrLYOPnl0CiEU+Zx
2HvC541SjQJTcJj9KBVd8YFWPIzF9NQ7MtbJTse3wvwBk1827YTr3dB6A8XEJdYH
NfZFPkolIg4GT30rpPVehNV9dkAjfpCoDRE0KH82X0PxnpumejMwGByZTfF+Cw0P
W7n4xCPrJwQVF+pQBGH6mSkGs+bIIhE9STj9ZoqxnYtuV/laozXrxvfe0qFJ/dKf
nj82DZMxYNHuJyBASpxoK4/nr6Lv1NBSGrcQtBx0cGWAJm2rF93n+PZb7JCXOuPb
9s2GxZFU6Xb446Z1ay6QgrtQ
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:35:47 2026 by rpki-client